$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft File: WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft (raw, json) Hash identifier: tRmllrtlEBO/5CCppO6FuHrOgf5305SHZMRr1+ERlpU= Subject key identifier: 76:E2:6B:D0:ED:51:FE:9B:3F:09:76:1D:72:F1:D8:20:D8:9D:3E:EE Authority key identifier: 58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84 Certificate issuer: /CN=A91C7B15/serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584 Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft Manifest number: 021A Signing time: Tue 04 Nov 2025 16:58:29 +0000 Manifest this update: Tue 04 Nov 2025 16:58:29 +0000 Manifest next update: Tue 11 Nov 2025 16:58:29 +0000 Files and hashes: 1: WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl (hash: JzRlIg6fURO3Uk1OygdG5IplMayK2JVTmzY/ab89iRQ=) 2: 04594232DEA011EE91181415C4F9AE02.roa (hash: ux/yn18OibC6Db2VOykrM0n0NcvF/7PYrwCoPjjFpC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15, serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584 Validity Not Before: Nov 4 16:58:29 2025 GMT Not After : Nov 11 16:58:29 2025 GMT Subject: CN=690a30b5-1585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a5:7a:9a:f5:8c:2a:60:b9:37:47:e5:c5:fd: b8:65:cc:62:3b:68:83:83:0d:03:0c:a6:a4:e4:73: 78:4d:97:52:18:f5:b5:b7:59:c4:d0:53:73:fa:37: a4:72:60:13:0d:58:cf:58:51:4e:0c:53:3b:b7:5b: 3e:dc:bf:5d:2b:85:66:78:1a:90:a1:7f:78:e2:de: 68:43:65:61:53:dc:43:7d:4d:61:08:09:34:ce:e1: dd:ff:bb:c8:ff:22:81:44:fc:79:e7:94:8e:da:07: 12:8f:e6:1e:43:fa:3a:b1:e6:d5:bf:46:5a:d0:cd: 32:2a:bc:42:c8:4e:bb:d3:6c:ca:bb:bb:4b:9c:d2: e6:99:b8:c8:b3:17:f4:71:a7:27:66:55:65:72:c2: 43:88:61:f7:54:a1:21:84:5e:85:2b:17:3e:95:3e: 9d:10:76:b9:c1:3d:42:f4:ed:eb:ef:da:fc:56:e4: 56:ac:26:de:de:1d:26:dc:8d:e6:75:66:f3:3e:c9: f5:29:3b:a0:98:8f:4f:75:b8:cb:63:4a:8f:14:49: 9e:aa:6c:e2:f7:4c:cd:b2:b8:e3:25:12:d3:e0:0e: c9:8b:4f:72:d0:ce:7f:e2:55:c7:d0:d1:0b:d7:51: 54:1d:ab:cf:ce:0e:e7:03:54:0c:52:fe:4b:88:d5: 92:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E2:6B:D0:ED:51:FE:9B:3F:09:76:1D:72:F1:D8:20:D8:9D:3E:EE X509v3 Authority Key Identifier: keyid:58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:77:31:2e:da:5b:50:4e:81:45:81:61:ef:35:5b:bb:1e:75: e5:c1:2e:d7:ef:94:be:0d:ed:f8:74:96:cb:b4:8f:dd:ba:fa: f0:eb:35:44:ad:66:15:43:19:01:02:36:00:ac:bb:4d:4e:1e: f3:46:a1:0b:2d:22:80:39:07:69:f9:28:39:3a:c9:3d:9b:c3: 1e:29:65:41:f3:be:70:83:4f:b7:ae:aa:d2:1a:ee:8c:cb:c0: 56:3b:44:7b:1b:d5:5b:fe:33:8c:f1:95:1b:ea:e2:03:81:5a: 5d:b7:e6:68:b9:67:2b:e5:ab:50:82:91:d1:9e:51:80:58:33: 66:ab:cc:c9:5a:23:87:32:83:38:7d:c6:33:b1:21:e5:07:61: e8:e7:be:7b:d7:ab:8d:a7:58:1e:7d:a7:80:a0:53:4c:c3:88: 49:6f:0f:26:49:ae:51:15:f6:1c:40:22:80:29:d3:34:24:a3: 9f:49:3d:f7:bd:2e:3a:af:89:4f:3a:bc:f7:7c:47:dc:76:4e: 4f:c4:78:4b:53:73:2f:04:38:e0:c6:68:7d:4d:60:2c:0c:6b: 2c:4c:19:6c:58:f5:e1:58:79:7f:92:e5:f4:de:f9:4a:c2:fb: ef:c4:36:6a:48:0f:a6:f1:8f:ee:86:e6:b6:76:10:9a:3f:a0: 51:3a:8c:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKDU4MEU0NjZCN0Q0RkE4NjQ5RDJFMEIyNzM3NUVBMjg2 QzZDNTQ1ODQwHhcNMjUxMTA0MTY1ODI5WhcNMjUxMTExMTY1ODI5WjAYMRYwFAYD VQQDEw02OTBhMzBiNS0xNTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKV6mvWMKmC5N0flxf24ZcxiO2iDgw0DDKak5HN4TZdSGPW1t1nE0FNz+jek cmATDVjPWFFODFM7t1s+3L9dK4VmeBqQoX944t5oQ2VhU9xDfU1hCAk0zuHd/7vI /yKBRPx555SO2gcSj+YeQ/o6sebVv0Za0M0yKrxCyE6702zKu7tLnNLmmbjIsxf0 cacnZlVlcsJDiGH3VKEhhF6FKxc+lT6dEHa5wT1C9O3r79r8VuRWrCbe3h0m3I3m dWbzPsn1KTugmI9PdbjLY0qPFEmeqmzi90zNsrjjJRLT4A7Ji09y0M5/4lXH0NEL 11FUHavPzg7nA1QMUv5LiNWS9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbia9Dt Uf6bPwl2HXLx2CDYnT7uMB8GA1UdIwQYMBaAFFgORmt9T6hknS4LJzdeoobGxUWE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS8zMjZFQjBCNDhE RUIxMUVEOTNGQUFEMEZDNEY5QUUwMi9XQTVHYTMxUHFHU2RMZ3NuTjE2aWhzYkZS WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1dBNUdhMzFQcUdTZExnc25OMTZpaHNiRlJZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0IxNS8zMjZFQjBCNDhERUIxMUVEOTNGQUFEMEZDNEY5QUUwMi9XQTVHYTMxUHFH U2RMZ3NuTjE2aWhzYkZSWVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAdzEu2ltQToFFgWHvNVu7HnXlwS7X75S+De34dJbLtI/duvrw6zVE rWYVQxkBAjYArLtNTh7zRqELLSKAOQdp+Sg5Osk9m8MeKWVB875wg0+3rqrSGu6M y8BWO0R7G9Vb/jOM8ZUb6uIDgVpdt+ZouWcr5atQgpHRnlGAWDNmq8zJWiOHMoM4 fcYzsSHlB2Ho575716uNp1gefaeAoFNMw4hJbw8mSa5RFfYcQCKAKdM0JKOfST33 vS46r4lPOrz3fEfcdk5PxHhLU3MvBDjgxmh9TWAsDGssTBlsWPXhWHl/kuX03vlK wvvvxDZqSA+m8Y/uhua2dhCaP6BROowg -----END CERTIFICATE-----Generated at Wed Nov 5 13:34:40 2025 by rpki-client